🇲🇾
Rizzy
2026-06-10 21:32:05
(8 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 20:01:07
(10 hours ago)
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 16:01:00.352695 2026] [security2:error] [pid 15883:tid 15963] [client 41.42.252.218:65215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.42.252.218 (+1 hits since last alert)|jimlawrencesongs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jimlawrencesongs.com"] [uri "/xmlrpc.php"] [unique_id "ainCfC9dJZqcSq5RzzG4yAAAAgc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-06-10 18:48:53
(11 hours ago)
(wordpress) Failed wordpress login from 41.42.252.218 (EG/Egypt/Cairo Governorate/Cairo/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-10 16:17:37
(13 hours ago)
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 12:17:29.160424 2026] [security2:error] [pid 18707:tid 18707] [client 41.42.252.218:54470] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.42.252.218 (+1 hits since last alert)|solarfarms.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "solarfarms.info"] [uri "/xmlrpc.php"] [unique_id "aimOGRLB5ulvZynDFhMeLwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-06-10 16:02:07
(14 hours ago)
Wordfence waf block on hope4scranton
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 12:44:17
(17 hours ago)
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 08:44:11.240306 2026] [security2:error] [pid 2593:tid 2593] [client 41.42.252.218:64691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.42.252.218 (+1 hits since last alert)|greatwesternfirearms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greatwesternfirearms.com"] [uri "/xmlrpc.php"] [unique_id "ailcG03MNuzkO632y17FpAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 11:41:47
(18 hours ago)
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 07:41:42.956514 2026] [security2:error] [pid 14740:tid 14740] [client 41.42.252.218:49160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.42.252.218 (+1 hits since last alert)|jeanniemorrislaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jeanniemorrislaw.com"] [uri "/xmlrpc.php"] [unique_id "ailNdobbuKzRKf-ZvLzvPAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 11:39:18
(18 hours ago)
[redacted] 41.42.252.218 - - [10/Jun/2026:13:38:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ...
show more
[redacted] 41.42.252.218 - - [10/Jun/2026:13:38:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 41.42.252.218 - - [10/Jun/2026:13:38:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site17859762.com"
[redacted] 41.42.252.218 - - [10/Jun/2026:13:38:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 41.42.252.218 - - [10/Jun/2026:13:39:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 41.42.252.218 - - [10/Jun/2026:13:39:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
...
show less
Hacking
Web App Attack
🇫🇷
dynamix
2026-06-10 11:39:00
(18 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 10:41:24
(19 hours ago)
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 06:41:16.336499 2026] [security2:error] [pid 31997:tid 31997] [client 41.42.252.218:63834] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.42.252.218 (+1 hits since last alert)|cajunpicasso.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cajunpicasso.com"] [uri "/xmlrpc.php"] [unique_id "aik_TFzLFuKsfQX9NUBAsQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 21:57:51
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 17:57:47.307885 2026] [security2:error] [pid 4819:tid 4819] [client 41.42.252.218:56987] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.42.252.218 (+1 hits since last alert)|walkercline.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "walkercline.com"] [uri "/xmlrpc.php"] [unique_id "aiiMWya6NCqtZ9MPOzqr3AAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 16:50:16
(1 day ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-09 14:17:12
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 41.42.252.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:17:05.013939 2026] [security2:error] [pid 28727:tid 28727] [client 41.42.252.218:63798] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.42.252.218 (+1 hits since last alert)|laura-stone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "laura-stone.com"] [uri "/xmlrpc.php"] [unique_id "aiggYdJJ-kaBOXlNIMW3qAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WeekendWeb
2026-06-09 10:20:01
(1 day ago)
Wordpress Vunerability attack
Web App Attack
🇩🇪
rh24
2026-06-08 22:08:37
(2 days ago)
(wordpress) Failed wordpress login from 41.42.252.218 (EG/Egypt/-): (CF_ENABLE)
Brute-Force